Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

step-security/setup-qemu-action/_next/static/chunks/app/layout-36884a1483c21d48.js

GitHub Action to install QEMU static binaries. Secure drop-in replacement for docker/setup-qemu-action.

9/10

spotdemo4/go-template/.github/actions/public-layout.tsx

template for go

6/10

oddstr13/jellyfin-plugin-repository-manager

A repository manager for Jellyfin plugins

4/10

modeseven-lfreleng-actions/draft-release-promote-action

Promotes a draft release to full release status

5/10

Maintained action available

dustin4444/k/.github/actions/test-package

K Framework Tools 7.0

5/10

Maintained action available

aerospike/aerospike-client-python/.github/actions/run-ee-server

Aerospike Python Client

4/10

ministryofjustice/laa-amend-a-claim/.github/actions/sanitize-branch-name

Amend a claim is a Spring Boot web application that enables Legal Aid Agency caseworkers to perform escape case assessments on claims submitted via Submit a Bulk Claim.

8/10

boostsecurityio/poutine-action

6/10

finnp/create-file-action

Github Action to create a new file from environment config

2/10

yonasbsd/rspack/.github/actions/docker/%5c%5c%5c%22https%3a/npmcharts.com/compare/%40rspack/core

A fast Rust-based web bundler.

5/10

Maintained action available

jahid11978/node/.github/actions/install-clang

Node.js JavaScript runtime ✨🐢🚀✨

4/10

Maintained action available

step-security/json-to-variables/__builder_checkout_dir__/.github/actions/public-layout.tsx

GitHub action reads JSON file and writes its content as environment variables. Secure drop-in replacement for antifree/json-to-variables.

10/10

ministryofjustice/laa-crime-equinity-historical-data/.github/actions/build-app-gradle

Provide view access to historical data from Equinity

5/10

coveord/spinnaker/.github/actions/publish-halconfig

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

3/10

sonarsource/gh-action-lt-backlog/pullrequestclosed

Automate GitHub backlog and Kanbans

6/10

comfy-org/publish-node-action

A Github Action for Publishing Custom Node Version to the Registry

5/10

geomais/sql-guardian

0/10

caffeelake/llvm-project/.github/workflows/public-layout.tsx

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.

3/10

Maintained action available

delaguardo/setup-graalvm

0/10

jbolda/covector/packages/fill

Transparent and flexible change management for publishing packages and assets.

4/10

Maintained action available